MAY. 19. 2005 12:04PM 



NO, 7497 P. 5 



Appl. No. 09/885,959 

Amdt. Dated: May 19, 2005 

Reply to Office Action of; November 19, 2004 

i 

I 

Amfiiadmantfl ftotheOaims 

This listing of claims will replace all prior versions and listings of claims in the application: 

t 

Listing of claims: 

1 . (currently amended) A method for multiplying an elliptic curve point Q(x,y) by a scalar K 
to provide a point kQ, the method comprising the steps of: 

a) selecting an elliptic curve of order n over a finite field F such that there exists an 
endomorphism y/ where ^/(Q) = A (Q) for all point Q (x,y) on the elliptic curve, and A is an ; 
integer[[,]] ; 

b) establishing a representation of said scalar k as a combination of components kj and said 



f=0 

c) combining said representation and said point Q to form a composite representation of a 
multiple of the form keQ-=*-kr4i^(Q)-K-r7 kgO + k iyr (0^ 4-, .. corresponding to kQ; and 

d) computing a value corresponding to said point kQ from said composite representation of kQ. 

2. (original) A method according to claim 1 wherein each of said components ki is shorter 
than said scalar k. 

3. (original) A method according to claim 1 wherein said components kj are initially 
selected and subsequently combined to provide said scalar k. 

4. (previously presented) A method according to claim 1 wherein said components ki are 
selected at random. 

5. (previously presented) A method according to claim 4 wherein said representation is of 
the form ko +kiX. 

6. (previously presented) A method according to claim 1 wherein said scalar k has a 
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predetermined value and said components koand ki are one half size of said scalar k. 

7, (original) A method according to claim 3 wherein said value of said multiple kQ is 
calculated using simultaneous multiple addition. 



8. (currently amended) A method according to claim 7 wherein ggeup e&d t g rm g Gi utili g ed4fl 
said simultaneous multiple addition af gi^recomputed includes precomputing a value G 
representing a grouping of like elements, said value G being used in said simultaneous multiple 
addition . 

9. (currently amended) A method according to claim 6 wherein said components kj are 
obtained by obtaining short basis vectors (Uo, Ui) of the field F, designating a vector v as (k,0), 
converting v &om a standard, orthgmomal orthonormal basis to the (Uo> Ui) basis, to obtain 
fractions /q/J representative of the vector v, applying said fractions to k to obtain a vector z, 
calculating an efficient equivalent v' in the composite representation of kQ. 

10. (currently amended) A method of generating in an elliptic curve cryptosystem a key pair 
having a integer k providing a private key and a public key kQ, where Q is a point on the curve, 
th&IPfitf^^ the step s of: 

a) selecting an elliptic curve over a fmite filed F such that there exists an endomorphism iff 
where l/(Q) - A Q for ail points Q (x,y) on the elliptic curve, A is an integer, 

b) establishing a representation of said key k as a combination of components ki and said integer 

X , of the form A, = ^^j^' mod n where n is the number of points on the elliptic curve, 



c) combining said representation and said point Q to form a composite representation of a 
multiple of the form kGQ-Mfr-ti^(QH^ kn-^ki (/{QI±^ corresponding to the public key kQ; 

and 

d) computing a value corresponding to said public kQ from said composite representation of kQ. 
1 1 . (previously presented) A method according to claim 10 wherein each of said components 
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ki is shorter than said scalar k, 

12. (previously presented) A method according to claim 1 1 wherein said components ki are 
initially selected and subsequently combined to provide said scalar k. 

13. (previously presented) A method according to claim 12 said components ki are selected at 
random. 



14. (previously presented) A method according to claim 13 wherein said representation is of 
the form ko +kiX, 

15. (previously presented) A method according to claim 10 wherein said scalar k has a 
predetermined value and said components ko and ki are selected to be one half the size of said 
scalar k. 

16. (previously presented) A method according to claim 12 wherein said value of said 
multiple kQ is calculated using simultaneous multiple addition. 

1 7. (currently amended) A method according to claim 16 wherein grouped torm fl Gi utilized 
ifi said simultaneous multiple addition ore prooomputod includes precomputing a value Gj 
representing a grouping of like elements, said value G being used in said^imultaneous multiple , 
addition . 

18. (currently amended) A method according to claim 15 wherein said components kj are j 
obtained by obtaining short basis vectors (Uo, Ui) of the field F, designating a vector v as (k,0), 
converting v from a standard, orthonomal orthonormal basis to the (Uo, Ui) basis, to obtain 
fractions/// representative of the vector v, applying said fractions to k to obtain a vector z, 
calculating an efficient equivalent v^ in the composite representation of kQ. 
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